CVE-2013-0653

Опубликовано: 27 янв. 2013

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to read arbitrary files via a crafted packet.

Ссылки

http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-02.pdf
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:4.01:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ge:intelligent_platforms_proficy_hmi\/scada_cimplicity:8.0:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:ge:intelligent_platforms_proficy_process_systems_with_cimplicity:-:*:*:*:*:*:*:*

cpe:2.3:h:ge:intelligent_platforms_proficy_process_systems:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13166

Средний

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-3crv-g23g-rwc9

github

больше 3 лет назад